[Pot_bastard]

Hello, sinisterly. I'm looking to learn on how to hack a website. Can anyone put me in the right direction to do so?

Thank you so much.

[Refusal]

I’d recommend looking into the many different techniques then finding one you feel comfortable learning like SQL Injection, XSS, etc etc

[mothered]

like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.

[Pot_bastard]

I’d recommend looking into the many different techniques then finding one you feel comfortable learning like SQL Injection, XSS, etc etc

like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.

Thank you for your reply. I will look into it.

[refa]

I recommended watch youtube videos and read hacking ebooks if you want ebooks link: https://sinister.li/Thread-Leak-90-Hacki...#pid901615

[Pot_bastard]

I recommended watch youtube videos and read hacking ebooks if you want ebooks link: https://sinister.li/Thread-Leak-90-Hacki...#pid901615

Thank you.

[mothered]

I’d recommend looking into the many different techniques then finding one you feel comfortable learning like SQL Injection, XSS, etc etc

like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.

Thank you for your reply. I will look into it.

You're welcome.

Feel free to ask for assistance as needed.

[Nork0i]

I'd say to install Metasploitable2 VM and then use the Damn Vulnerable Web Application (DVWA) tool to learn and improve your skills against a dummy website, you can configure it the way you want too which is good when you're trying to learn certain techniques. Just search metasploitable2 and DVWA in YouTube, there's a tonne of videos.

http://www.dvwa.co.uk/

[Sikom]

I have two recommendations. 1. Use linux or other unix based system, as there are quite a few tools that are more accessible on linux.
Secondly I would recommend doing CTF challenges to practice and learn new methods of explotation (legally). A few different ones I got, varying difficulty and subject.
(DISCLAIMER: I am not affiliated with any of these sites in any way, and I can not say anything of their quality)
http://overthewire.org
https://picoctf.com/
https://attackdefense.com/
https://www.hackthebox.eu/
https://ctftime.org/
https://www.root-me.org/?lang=en
https://capturetheflag.withgoogle.com/
https://www.vulnhub.com/
https://crackmes.one/
https://www.holidayhackchallenge.com/2018/
https://www.owasp.org/index.php/Category...at_Project
https://www.owasp.org/index.php/OWASP_Security_Shepherd
https://www.owasp.org/index.php/OWASP_Ju...op_Project
https://www.hackthissite.org/
https://cryptopals.com/
https://19.tghack.no/